Skip to main content
Question

Automox Service account permission on Mac - CrowdStrike uninstall worklet

  • July 31, 2024
  • 1 reply
  • 57 views

Forum|alt.badge.img

Hi, 

I’m running a simple command from the worklet:

/Applications/Falcon.app/Contents/Resources/falconctl uninstall --maintenance-token $Token

I also tried:
sudo /Applications/Falcon.app/Contents/Resources/falconctl uninstall --maintenance-token $Token

With both commands, I’m getting the following error:
“Error: Failed to read password”

Which seems to me that it is prompting for an “admin” password. 
I’m running the worklet in a M1 Mac, automox account has a secure token enabled (checked by running: sysadminctl -secureTokenStatus _automoxserviceaccount). 

Is it a permissions issue? 
If I run a “whoami” from the worklet, it returns: root. So, I would say it is not a permissions issue.
But then why it seems to be prompting for a password? 

Thank you for your help. 

 

1 reply

Forum|alt.badge.img
  • Community Manager
  • 93 replies
  • August 2, 2024

Hi Victor! So sorry for the issue you’re experiencing here. Do you mind sending a ticket to support@automox.com? I want to make sure our support team helps you with this. 


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings